summaryrefslogtreecommitdiff
path: root/op-mode-definitions/openvpn.xml
blob: 4a7f985e99cba02ec614e339cbc89ddeba07ee37 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
<?xml version="1.0"?>
<interfaceDefinition>
  <node name="generate">
    <children>
    <node name="openvpn">
      <properties>
        <help>OpenVPN key generation tool</help>
      </properties>
      <children>
        <tagNode name="key">
          <properties>
            <help>Generate shared-secret key with specified file name</help>
            <completionHelp>
              <list>&lt;filename&gt;</list>
            </completionHelp>
          </properties>
          <command>
            result=1;
            key_path=$4
            full_path=

            # Prepend /config/auth if the path is not absolute
            if echo $key_path | egrep -ve '^/.*' > /dev/null; then
                full_path=/config/auth/$key_path
            else
                full_path=$key_path
            fi

            key_dir=`dirname $full_path`
            if [ ! -d $key_dir ]; then
                echo "Directory $key_dir does not exist!"
                exit 1
            fi

            echo "Generating OpenVPN key to $full_path"
            sudo /usr/sbin/openvpn --genkey --secret "$full_path"
            result=$?
            if [ $result = 0 ]; then
              echo "Your new local OpenVPN key has been generated"
            fi
            /usr/libexec/vyos/validators/file-exists --directory /config/auth "$full_path"
          </command>
        </tagNode>
      </children>
    </node>
    </children>
  </node>
  <node name="reset">
    <children>
      <node name="openvpn">
        <children>
          <tagNode name="client">
            <properties>
              <help>Reset specified OpenVPN client</help>
              <completionHelp>
                <script>sudo ${vyos_completion_dir}/list_openvpn_clients.py --all</script>
              </completionHelp>
            </properties>
            <command>echo kill $4 | socat - UNIX-CONNECT:/tmp/openvpn-mgmt-intf > /dev/null</command>
          </tagNode>
          <tagNode name="interface">
            <properties>
              <help>Reset OpenVPN process on interface</help>
              <completionHelp>
                <script>sudo ${vyos_completion_dir}/list_interfaces.py --type openvpn</script>
              </completionHelp>
            </properties>
            <command>sudo kill -SIGUSR1 $(cat /var/run/openvpn/$4.pid)</command>
          </tagNode>
        </children>
      </node>
    </children>
  </node>
</interfaceDefinition>